UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

Thirteen npm packages deliver WeaselBiscuit, a JavaScript stealer that harvests Chrome extension storage across Windows, macOS, and Linux.

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on targeted systems.

Google has pushed out another urgent update for its Chrome browser with all users urged to restart their browsers.

Chrome zero-day CVE-2026-85046 is under active attack as the sixth actively exploited Chrome vulnerability of 2026. A type confusion flaw in Chrome's V8 JavaScript engine lets attackers run code ...

With more frequent and dynamic browser patching in the works, Google shares its defense plans with ZDNET in this exclusive interview.

Google has confirmed an exploited vulnerability, of a type frequently targeted by hackers, that enables arbitrary code execution. Update now to patch against it.

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such vulnerability patched since the start of the year.

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities. The exploited security issue, identified as ...

Chrome's sixth exploited zero-day of the year was patched on 3 September. On 11 September the Cyber Resilience Act starts a 24-hour clock.

A new BragJack attack shows how browser extensions can abuse built-in AI assistants to access files, screenshots, emails, and ...

Do you feel like, "It would be convenient to have an app of my own, but programming seems difficult"?If you use ChatGPT as a partner to consult with, even beginners can start by building small web ...